IT Security Policy Development: Management Policies and Procedures

Play an AI-generated podcast conversation about this lesson

What is the first step in building an IT Security Plan?

Security Audit

Risk Assessment (correct)

Implementation Plan

Developing a Security Policy

What does the Risk Assessment involve?

Implementation of security procedures

Creating a Security Organization

Inventory of information assets and estimation of their value (correct)

Conducting a security audit

What is the purpose of developing a Security Policy?

Implementing security procedures

Creating a Security Organization

Prioritizing information risks and setting acceptable targets (correct)

Conducting a security audit

What should the Security Policy prioritize?

Information risks and acceptable targets Signup and view all the answers

What is the first step in developing a security plan?

Generating and controlling the information Signup and view all the answers

What is the primary purpose of an authorization management system?

To establish where and when a user is permitted to access certain parts of a network Signup and view all the answers

What is the main focus of a MIS audit?

Reviewing technologies, procedures, documentation, training, and personnel Signup and view all the answers

What does an access control system determine?

Who can gain legitimate access to information Signup and view all the answers

What is the scope of task for a security organization team?

Administering access controls, authentication procedures, and authorization policies Signup and view all the answers

What is the purpose of performing an MIS audit?

To examine the firm’s overall security environment and controls governing individual information systems Signup and view all the answers

What is the main focus of an authorization management system?

Determining different levels of access to information for different level of users Signup and view all the answers

What does an authentication procedure include?

Use of digital signatures, certificates of authority, password, biometric, etc. Signup and view all the answers

What is the purpose of an access control system?

Determining where and when a user is permitted to access certain parts of a network. Signup and view all the answers

What is the action step to achieve the security plan goals?

Administering access controls, authentication procedures, and authorization policies. Signup and view all the answers

IT Security Policy Development: Management Policies and Procedures

Podcast Beta

Questions and Answers